gegar
Level 1 (8 points)
Mac OS X

Q: Airplay Sending TCP Packet External Address

Hi,

 

My iMac 5K - Late 2014 running El Capitan is using AirPlay to send packet to an address in China.  (116.129.1.107 -- Port 7000).  It does not look normal.

$ while true; do sudo  netstat -an -p TCP | egrep "116|7000|10.0."; sudo lsof -i -P | egrep "SYN_SENT|116.129|10.0." ; sleep 1; done

tcp4       0      0  192.168.0.24.55465     116.129.1.107.7000     SYN_SENT  

AirPlayXP 29606           root   10u  IPv4 0x7fc09dc104d9745b      0t0    TCP 192.168.0.24:55465->116.129.1.107:7000 (SYN_SENT)

 

It is using the command AirPlayXPCHelper.  I am trying to kill the process, but it starts immediately.

 

Thanks,

 

GeGar

Posted on Apr 17, 2016 8:36 PM

Close
gegar

Q: Airplay Sending TCP Packet External Address

  • All replies
  • Helpful answers

  • by Linc Davis,

    Linc Davis Linc Davis Apr 17, 2016 8:57 PM in response to gegar
    Level 10 (207,925 points)
    Applications
    Apr 17, 2016 8:57 PM in response to gegar

    That would happen if you were streaming something to an AirPlay receiver from iTunes, or from some third-party application.

  • by gegar,

    gegar gegar Apr 19, 2016 4:52 AM in response to Linc Davis
    Level 1 (8 points)
    Mac OS X
    Apr 19, 2016 4:52 AM in response to Linc Davis

    The iMac is not connected to any other device except the external router.  I erase the hard drive and reinstalled El Capitan and it is still trying to connect to the same 116.129.1.107 server using port 7000.

     

    I am blocking out with a software firewall, but I still think it is not normal.

     

    block out on en0: 192.168.0.5.51092 > 116.129.1.107.7000: Flags [S], seq 1985751725, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 83748774 ecr 0,sackOK,eol], length 0